Play Now Login Create Account
illyriad
   New Posts New Posts RSS Feed - 20MAY2016 Illyriad is now secure connections only
   FAQ FAQ   Forum Search    Register Register   Login Login

20MAY2016 Illyriad is now secure connections only

 Post Reply Post Reply Page  <1234>
Author
Digioso View Drop Down
Forum Warrior
Forum Warrior
Avatar

Joined: 09 Feb 2015
Location: Germany
Status: Offline
Points: 287
Post Options Post Options   Thanks (0) Thanks(0)   Quote Digioso Quote  Post ReplyReply Direct Link To This Post Posted: 21 May 2016 at 07:50
@Tensmoor: I'm using NoScript and NoScript now asked me to allow data from illyriad.net. Otherwise I wasn't able to see anything. So maybe you have to also check for illyriad.net .
Back to Top
Tensmoor View Drop Down
Postmaster General
Postmaster General
Avatar

Joined: 07 Apr 2015
Location: Scotland
Status: Offline
Points: 1579
Post Options Post Options   Thanks (0) Thanks(0)   Quote Tensmoor Quote  Post ReplyReply Direct Link To This Post Posted: 21 May 2016 at 09:28
Originally posted by Digioso Digioso wrote:

@Tensmoor: I'm using NoScript and NoScript now asked me to allow data from illyriad.net. Otherwise I wasn't able to see anything. So maybe you have to also check for illyriad.net .


I gave that a try Digioso but no joy. I think the problem is that I'm loading resources from a non-https server. As I'm not willing to invest the money needed to secure both the runtime and development servers I'm currently creating a really basic browser extension for Firefox to see if I can do it that way.

Edited to change non-http to non-https


Edited by Tensmoor - 21 May 2016 at 15:02
Back to Top
Dungshoveleux View Drop Down
Postmaster
Postmaster


Joined: 09 Nov 2013
Status: Offline
Points: 935
Post Options Post Options   Thanks (0) Thanks(0)   Quote Dungshoveleux Quote  Post ReplyReply Direct Link To This Post Posted: 21 May 2016 at 13:05
Update: as of now saturday 12:01 the problem seems to have been resolved.
A big thank you to GM Thundercat and any other devs involved.
I take back the bit about the pub, but on second thoughts, you guys do need to get out a bit. Existing on food like cheese slices* that can be slipped under the office door isn't healthy. 
Smile

*see Michael from the 1995 book Microserfs by Douglas Coupland.


Edited by Dungshoveleux - 21 May 2016 at 13:11
Back to Top
Diva View Drop Down
Forum Warrior
Forum Warrior
Avatar

Joined: 20 Dec 2011
Location: United States
Status: Offline
Points: 416
Post Options Post Options   Thanks (0) Thanks(0)   Quote Diva Quote  Post ReplyReply Direct Link To This Post Posted: 21 May 2016 at 14:37
I don't know if this is related, but in-game medallist function sharing design by IGM is not showing to the receiver of IGM.

I will make a ticket.
"Um diva.... you are sort of acting like a .... diva...." - PhoenixFire
Back to Top
Tensmoor View Drop Down
Postmaster General
Postmaster General
Avatar

Joined: 07 Apr 2015
Location: Scotland
Status: Offline
Points: 1579
Post Options Post Options   Thanks (0) Thanks(0)   Quote Tensmoor Quote  Post ReplyReply Direct Link To This Post Posted: 23 May 2016 at 12:54
I've found a solution to the problem with DurcTools not running but there is one outstanding issue that I can't solve. The tools use a mix of localStorage and IndexedDB to store information for players on their own machines. Access to the information stored by both these technologies is only available when the browser that created the data is on the site that it was on when it created it. The change in the URL from http to https means that any data previously stored is no longer available. While this is not a major problem for the majority of the data it is for the  notes tool. Some players have created quite a large collection of notes that they will no longer be able to access. I've contacted GM Rikoo to see if we can come up with a method of being able to allow users to export the data and then import it into the new secure site. In the meantime I'll carry on getting the DurcTools site transfered to a secure server and back up and running.
Back to Top
Digioso View Drop Down
Forum Warrior
Forum Warrior
Avatar

Joined: 09 Feb 2015
Location: Germany
Status: Offline
Points: 287
Post Options Post Options   Thanks (0) Thanks(0)   Quote Digioso Quote  Post ReplyReply Direct Link To This Post Posted: 01 Jun 2016 at 19:10
Was there another change today morning regarding the Combat report API and HTTPS?

When you access a combat report or API key it now automatically switches to HTTPS.

If yes - would it be possible to revoke that change until Kodabears tournament has ended? It seems that his webhoster is blocking https connections and therefore only http is allowed.
Back to Top
GM ThunderCat View Drop Down
Moderator Group
Moderator Group
Avatar
GM

Joined: 11 Dec 2009
Location: Everywhere
Status: Offline
Points: 2157
Post Options Post Options   Thanks (0) Thanks(0)   Quote GM ThunderCat Quote  Post ReplyReply Direct Link To This Post Posted: 01 Jun 2016 at 20:01
Its been changed since the announcement; it may be the redirect - if he changes the url to be https rather than http it should work.

It would be very strange for a webhost to block https
Back to Top
Digioso View Drop Down
Forum Warrior
Forum Warrior
Avatar

Joined: 09 Feb 2015
Location: Germany
Status: Offline
Points: 287
Post Options Post Options   Thanks (0) Thanks(0)   Quote Digioso Quote  Post ReplyReply Direct Link To This Post Posted: 01 Jun 2016 at 20:07
Thanks for the answer, TC.

We tried changing the URL to https - but no luck so far.
The problem first occured today morning at around 4am server time.
Our database update was still working at 04:03:44am and the next one around 5 minutes later didn't work anymore.

Right now I'm looking into disabling SSL verifies but so far no luck.

Edit:
Our current error:

Error GETing https://elgea.illyriad.co.uk/external/combatreportsapi/SOMEONES_API_KEY_HERE?since=2016-06-01T04:03:44: Can't connect to elgea.illyriad.co.uk:443 (Connection timed out)

Since I can run that query just fine on my PC I guess that port 443 might be blocked by the firewall.


Edited by Digioso - 01 Jun 2016 at 20:39
Back to Top
GM Stormcrow View Drop Down
Moderator Group
Moderator Group
Avatar
GM

Joined: 23 Feb 2010
Location: Illyria
Status: Offline
Points: 3820
Post Options Post Options   Thanks (0) Thanks(0)   Quote GM Stormcrow Quote  Post ReplyReply Direct Link To This Post Posted: 02 Jun 2016 at 06:09
This is a strange one.

Illy's pages (including the API key calls) have been redirecting to https for nearly 2 weeks now; and we certainly haven't changed anything in the last 24-48hrs.

Can you command-line test (from the webserver) an https (port 443) GET of any old page (not necessarily an API page) on elgea and see what comes back?  And can you then try a standard HTTP (port 80) get of the same page?

Would be useful to know.  My suspicion is, I'm afraid to say, that this is nothing to do with us; and I think you need to have a convo with your hosting provider, who may have seen a large, sudden, recent spike in traffic inbound and outbound from *.illyriad.co.uk (due to your tournie) and have chosen to block the domain.

Do let us know.

SC


Back to Top
kodabear View Drop Down
Postmaster General
Postmaster General
Avatar
Player Council - Astronomer

Joined: 18 Jun 2013
Location: Lucerna
Status: Offline
Points: 1237
Post Options Post Options   Thanks (0) Thanks(0)   Quote kodabear Quote  Post ReplyReply Direct Link To This Post Posted: 02 Jun 2016 at 06:19
I am still able to get the datafiles with out any problems. I am in middle of talking to them had to open up a ticket and who knows how long that will take. I do want to point out the datafiles arent  redirecting to https

Edited by kodabear - 02 Jun 2016 at 06:26
Back to Top
 Post Reply Post Reply Page  <1234>
  Share Topic   

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.03
Copyright ©2001-2019 Web Wiz Ltd.